Manager InfoSec

About our client

Our client is a trailblazing pioneer in the Tobacco Manufacturing Industry. What sets them apart is their unwavering commitment to innovation and progress. They have embarked on a remarkable journey of transformation, with a resolute aim to create a smoke-free future. This ambitious endeavour has completely redefined every aspect of their business, from the production and distribution of their products, to how they interact with their customers and society as a whole.

By embracing this transformation, our client is leading from the front, with their pioneering vision and steadfast determination to create a smoke-free future.

With a workforce of more than 75,000 talented individuals worldwide across 180 countries, they have truly established themselves as a global leader in the industry. 

Job

The Role:

• Design, evolve and support execution/adoption of modern InfoSec strategies and roadmaps for the secure use of Information Technology (IT) within the various technological domains of T&PE and EAD platforms.
• Establish and apply information security guardrails and blueprints and enable their application by other teams.
• Support the adoption of the new patterns in strict alignment with the Head of InfoSec T&PE and EAD.

Responsibilities:

• Guide around the optimal security architecture of Information Technology (IT) solutions developed, run and supported by the T&PE and EAD.
• Convert customer security requirements (both technical and business process related) into conceptual blueprints, following industry standards, frameworks and considering risk vs. reward, budget constraints and potential integration or operational challenges.
• Assess information security risks affecting the technology landscape supporting the T&PE and EAD. Propose and support the implementation of short/mid/long term risk reduction initiatives and projects aimed at enabling secure development of "industry 4.0" digitalization use cases and increasing resilience against the continuously evolving cyber threat landscape.
• Formalize (e.g., in the form of diagrams, guardrails, standard operating procedures, etc.) relevant information security principles and requirements that govern how to adequately protect the confidentiality, integrity and availability of T&PE and EAD infrastructure.
• Contribute, in close collaboration with other Information Security teams, to the evolution of the overall information security maturity of T&PE and EAD, e.g., by coordinating the research, evaluation, recommendation and implementation of new or updated security technology solutions aimed at reducing ever increasing cyber risk.
• Provide expertise to 100+ colleagues in Information Security and other IT functions on matters such as applicable policies, standards, procedures and guidelines, efficient use of tools and technologies related to the T&PE ans EAD.
• Liaise with the InfoSec Architecture and IT Architecture community to ensure that T&PE and EAD security principles are effectively and efficiently embedded in new initiatives or experiments.

Requirements:

• University Master’s Degree (Computer Sciences, Information Systems, Engineering, Business Administration or equivalent)
• Professional certifications related to Information Security, e.g. CISSP, SANS GIAC, Ecouncil CEH/CIH
• Minimum 5 years of experience in an IT Security position, preferably in the architecture or engineering space
• Proven track record in securing infrastructure
• Demonstrated experience with the design and implementation of secure technologies, ideally at large companies.
• Familiarity with cloud computing architectures (e.g., IaaS, PaaS, FaaS, SaaS) and their corresponding characteristics in terms of information security
• Considerable technical writing proficiency, oral presentation skills, problem solving and decision-making skills.
• Highly collaborative mindset, with ability to build relationships with colleagues and manage partners from different cultures and seniority levels throughout the organization.
• Excellent written and oral presentation in English, abstract thinking, problem solving, and decision-making.
• Quick learner with a pragmatic, analytical and autonomous mindset